Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: mph8V8q++DlwCvaX5X0ou7kSnZca7sPHVKQicZMJwUU=
Subject key identifier: 9A:88:26:7A:E3:69:CF:01:D8:D8:6D:3B:72:9E:3E:11:4B:18:14:F5
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 0199FC21C0BDA27E1B1AA8CEB0E7D45A27D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: ABwPaUac3XZ7d5ljAtQRxPRpqOeOYcZ+ksebcTdFkE4=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c0:bd:a2:7e:1b:1a:a8:ce:b0:e7:d4:5a:27:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=9a88267ae369cf01d8d86d3b729e3e114b1814f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:8c:73:0e:49:e6:f2:d7:c3:ba:9a:62:bd:
a5:f4:12:8a:74:83:e5:6e:79:59:a4:8b:65:26:0d:
26:b1:a4:34:3c:af:48:e2:d9:8c:da:68:be:f5:4b:
44:0a:de:72:bf:47:79:0a:e7:6e:f5:ca:20:73:d4:
89:aa:96:cd:03:96:de:ec:2c:a9:01:7c:5e:cb:e3:
b0:73:3f:2c:fc:0f:5f:d2:b7:21:1f:97:3a:dc:4e:
27:82:17:08:66:2b:90:55:db:98:51:04:f9:2e:8c:
ac:fc:7a:fd:98:70:72:53:a4:85:f7:f0:9c:98:3b:
8d:b0:a2:a0:27:ec:04:93:cd:76:d6:38:de:a7:0a:
98:49:37:7f:21:7a:43:56:02:91:74:6f:74:9c:27:
f1:c3:16:e6:e3:5c:c3:be:7d:e2:da:2d:d2:fd:df:
e2:81:53:32:80:56:23:19:72:ed:7c:86:eb:13:11:
1b:13:be:4f:ac:80:da:a1:c8:2d:81:31:53:a1:60:
53:8d:6e:80:20:fc:b3:8f:80:4f:1b:12:2e:2b:72:
54:97:90:cb:ac:6d:38:c3:0a:76:04:42:63:a1:cb:
35:8e:71:be:2a:8b:f2:cd:36:a4:0b:da:e8:be:d5:
ad:31:b6:58:1b:b6:61:15:75:68:d1:07:e6:83:71:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:26:7A:E3:69:CF:01:D8:D8:6D:3B:72:9E:3E:11:4B:18:14:F5
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a8:75:af:f5:bb:23:2d:9f:7f:93:08:39:6b:16:9d:ba:dc:
68:a9:71:13:dc:14:6a:12:e8:05:db:12:8d:22:27:10:1e:a4:
8b:32:c8:e4:5b:7e:dd:8d:75:24:e5:79:c1:48:a9:ed:7f:81:
9d:bc:93:f8:41:94:00:64:21:7e:eb:e2:48:25:34:98:40:f7:
40:48:35:74:a6:2c:e0:dd:a8:62:99:d5:f5:42:d1:b8:1f:68:
5b:2d:f0:88:6e:fa:1f:d4:c1:91:3a:c9:3f:8b:aa:8b:5a:e5:
4e:83:64:6c:cc:f9:e5:3d:6e:17:31:d0:56:a9:59:f0:7c:2e:
f4:21:50:12:93:c3:0c:66:fb:8c:e9:83:1a:d7:75:6d:7f:4b:
61:47:93:2a:96:ff:ed:90:c6:c5:d5:f7:50:ca:2f:a1:56:5d:
5c:b2:77:06:51:ff:bf:e1:77:86:c4:33:f7:7a:cc:56:a4:97:
33:e5:ba:20:38:0c:30:81:d2:51:82:4c:da:22:6e:ba:53:8a:
27:a7:82:8b:a9:c1:09:e7:0c:a4:79:22:ff:f8:c2:d7:67:72:
c9:ef:cc:b9:33:1e:04:ee:d4:78:4c:e1:93:23:bf:28:97:0f:
1d:9f:51:80:0b:9a:5e:62:7f:a6:af:e3:5e:c5:f0:ec:4c:43:
47:4c:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:56 2025 by rpki-client